Purchase confirmation emails are not encrypted

  • Describe the bug. Describe what is happening when the bug occurs. Describe what you would normally expect to occur.

The email sent for purchase confirmations after buying Builder’s Club / Robux is not encrypted.

  • How often does the bug happen (Everytime/sometimes/rarely)?

  • Would a screenshot or video help describe it to someone? If so, post one.
    RBXE2

  • When did the bug start happening? If we can tie it to a specific release that helps us figure out what we broke.
    The earliest email I have in my inbox is from Oct. 11th, 2017 - it is not encrypted.

  • Anything else that you would want to know about the bug if it were your job to find and fix it.

I would fix this because the email contains sensitive information:
the cardholder’s full name,
the last four digits of the credit/debit card,
the purchase id.

Other company transaction confirmation emails are using standard encryption, like Steam and Amazon.

19 Likes